Our model
Landlord and tenant are clearly separated. Kitchen staff never see another restaurant's data; databases and assets are scoped per tenant for security and compliance.
We are a landlord application for a multitenant restaurant product. Central teams manage tenants, subscriptions, and global settings; each kitchen runs in an isolated environment with its own data.